IAM

Identity & access

Proving who someone is and controlling exactly what they can touch.

13 terms

Search this domain

Proving who someone is, and making sure what they can access matches what their role actually requires.

Showing 13 of 13

Account lockout Temporarily disabling a login after too many failed password attempts. Conditional access Access rules that adapt to context — location, device health, risk. Identity and access management (IAM) The systems that create accounts, verify identity, and control access. Identity provider (IdP) The central service that verifies identity and issues trusted proof of it. Multi-factor authentication (MFA) Requiring two or more proofs of identity to log in, not just a password. OAuth 2.0 Lets one app access another on your behalf without ever seeing your password. OpenID Connect (OIDC) An identity layer on top of OAuth 2.0 that confirms who a user actually is. Passkeys A passwordless sign-in method tied to a device that resists phishing. Password manager Generates and stores a unique, strong password for every account. Privileged access management (PAM) Extra controls around the small number of highly powerful admin accounts. Role-based access control (RBAC) Granting access based on a person's role, not configuring each account by hand. Security Assertion Markup Language (SAML) An older standard for passing proof of login between systems for SSO. Single sign-on (SSO) Logging in once to access many connected applications.